syzbot


KCSAN: data-race in __io_fill_cqe_req / io_uring_poll

Status: auto-closed as invalid on 2022/09/07 08:28
Reported-by: syzbot+@syzkaller.appspotmail.com
First crash: 260d, last: 126d

Sample crash report:
==================================================================
BUG: KCSAN: data-race in __io_fill_cqe_req / io_uring_poll

read-write to 0xffff888138227a50 of 4 bytes by task 30577 on cpu 0:
 io_get_cqe fs/io_uring.c:2241 [inline]
 __io_fill_cqe_req+0x242/0x5a0 fs/io_uring.c:2476
 __io_req_complete_post fs/io_uring.c:2580 [inline]
 io_poll_task_func+0x1a8/0x280 fs/io_uring.c:6940
 handle_tw_list fs/io_uring.c:2938 [inline]
 tctx_task_work+0x8d0/0xc10 fs/io_uring.c:2967
 task_work_run+0x8e/0x110 kernel/task_work.c:177
 io_run_task_work fs/io_uring.c:3218 [inline]
 io_uring_try_cancel_requests+0x2d2/0x30b fs/io_uring.c:11516
 io_uring_cancel_generic+0x24b/0x415 fs/io_uring.c:11666
 __io_uring_cancel+0x11/0x20 fs/io_uring.c:11703
 io_uring_files_cancel include/linux/io_uring.h:44 [inline]
 do_exit+0x2c6/0x1720 kernel/exit.c:750
 do_group_exit+0xa5/0x160 kernel/exit.c:925
 get_signal+0xf54/0x1020 kernel/signal.c:2857
 arch_do_signal_or_restart+0x87/0x2d0 arch/x86/kernel/signal.c:869
 exit_to_user_mode_loop+0x78/0x130 kernel/entry/common.c:166
 exit_to_user_mode_prepare kernel/entry/common.c:201 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:283 [inline]
 syscall_exit_to_user_mode+0x6a/0x90 kernel/entry/common.c:294
 do_syscall_64+0x37/0x70 arch/x86/entry/common.c:86
 entry_SYSCALL_64_after_hwframe+0x63/0xcd

read to 0xffff888138227a50 of 4 bytes by task 30585 on cpu 1:
 __io_cqring_events fs/io_uring.c:2197 [inline]
 io_cqring_events fs/io_uring.c:3201 [inline]
 io_uring_poll+0xc5/0x150 fs/io_uring.c:11232
 vfs_poll include/linux/poll.h:88 [inline]
 io_poll_check_events+0x1ee/0x4f0 fs/io_uring.c:6878
 io_poll_task_func+0x31/0x280 fs/io_uring.c:6926
 handle_tw_list fs/io_uring.c:2938 [inline]
 tctx_task_work+0x8d0/0xc10 fs/io_uring.c:2967
 task_work_run+0x8e/0x110 kernel/task_work.c:177
 get_signal+0xeca/0x1020 kernel/signal.c:2634
 arch_do_signal_or_restart+0x87/0x2d0 arch/x86/kernel/signal.c:869
 exit_to_user_mode_loop+0x78/0x130 kernel/entry/common.c:166
 exit_to_user_mode_prepare kernel/entry/common.c:201 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:283 [inline]
 syscall_exit_to_user_mode+0x6a/0x90 kernel/entry/common.c:294
 do_syscall_64+0x37/0x70 arch/x86/entry/common.c:86
 entry_SYSCALL_64_after_hwframe+0x63/0xcd

value changed: 0x00001c51 -> 0x00001c52

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 30585 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-01583-g7d0d3fa7339e-dirty #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022
==================================================================

Crashes (59):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci2-upstream-kcsan-gce 2022/08/03 08:25 upstream 7d0d3fa7339e 1c9013ac .config log report info KCSAN: data-race in __io_fill_cqe_req / io_uring_poll
ci2-upstream-kcsan-gce 2022/08/01 10:59 upstream 3d7cb6b04c3f fef302b1 .config log report info KCSAN: data-race in __io_fill_cqe_req / io_uring_poll
ci2-upstream-kcsan-gce 2022/07/31 01:28 upstream 620725263f42 fef302b1 .config log report info KCSAN: data-race in __io_fill_cqe_req / io_uring_poll
ci2-upstream-kcsan-gce 2022/07/29 17:39 upstream 6e2c0490769e fef302b1 .config log report info KCSAN: data-race in __io_fill_cqe_req / io_uring_poll
ci2-upstream-kcsan-gce 2022/07/19 23:09 upstream ca85855bdcae 775344bc .config log report info KCSAN: data-race in __io_fill_cqe_req / io_uring_poll
ci2-upstream-kcsan-gce 2022/07/16 18:32 upstream c658cabbfd32 95cb00d1 .config log report info KCSAN: data-race in __io_fill_cqe_req / io_uring_poll
ci2-upstream-kcsan-gce 2022/07/15 12:53 upstream e5d523f1ae8f 5d921b08 .config log report info KCSAN: data-race in __io_fill_cqe_req / io_uring_poll
ci2-upstream-kcsan-gce 2022/07/15 00:08 upstream 9bd572ec7a66 5d921b08 .config log report info KCSAN: data-race in __io_fill_cqe_req / io_uring_poll
ci2-upstream-kcsan-gce 2022/07/13 22:39 upstream 4a57a8400075 5d921b08 .config log report info KCSAN: data-race in __io_fill_cqe_req / io_uring_poll
ci2-upstream-kcsan-gce 2022/07/13 07:05 upstream b047602d579b 5d921b08 .config log report info KCSAN: data-race in __io_fill_cqe_req / io_uring_poll
ci2-upstream-kcsan-gce 2022/07/12 15:46 upstream 5a29232d870d d91dd8ea .config log report info KCSAN: data-race in __io_fill_cqe_req / io_uring_poll
ci2-upstream-kcsan-gce 2022/07/11 11:33 upstream 32346491ddf2 f3f217ff .config log report info KCSAN: data-race in __io_fill_cqe_req / io_uring_poll
ci2-upstream-kcsan-gce 2022/07/10 19:38 upstream d9919d43cbf6 b5765a15 .config log report info KCSAN: data-race in __io_fill_cqe_req / io_uring_poll
ci2-upstream-kcsan-gce 2022/07/08 20:15 upstream a471da3100ef 8442e655 .config log report info KCSAN: data-race in __io_fill_cqe_req / io_uring_poll
ci2-upstream-kcsan-gce 2022/07/02 10:47 upstream 089866061428 1434eec0 .config log report info KCSAN: data-race in __io_fill_cqe_req / io_uring_poll
ci2-upstream-kcsan-gce 2022/07/01 20:55 upstream b336ad598a3b 1434eec0 .config log report info KCSAN: data-race in __io_fill_cqe_req / io_uring_poll
ci2-upstream-kcsan-gce 2022/06/28 12:40 upstream 941e3e791269 ef82eb2c .config log report info KCSAN: data-race in __io_fill_cqe_req / io_uring_poll
ci2-upstream-kcsan-gce 2022/06/27 12:09 upstream 03c765b0e3b4 a371c43c .config log report info KCSAN: data-race in __io_fill_cqe_req / io_uring_poll
ci2-upstream-kcsan-gce 2022/06/25 08:22 upstream 8c23f235a6a8 a371c43c .config log report info KCSAN: data-race in __io_fill_cqe_req / io_uring_poll
ci2-upstream-kcsan-gce 2022/06/24 19:46 upstream 38bc4ac43168 a371c43c .config log report info KCSAN: data-race in __io_fill_cqe_req / io_uring_poll
ci2-upstream-kcsan-gce 2022/06/24 11:39 upstream 92f20ff72066 a371c43c .config log report info KCSAN: data-race in __io_fill_cqe_req / io_uring_poll
ci2-upstream-kcsan-gce 2022/06/24 08:19 upstream 92f20ff72066 a5dbd430 .config log report info KCSAN: data-race in __io_fill_cqe_req / io_uring_poll
ci2-upstream-kcsan-gce 2022/06/23 21:25 upstream 92f20ff72066 912f5df7 .config log report info KCSAN: data-race in __io_fill_cqe_req / io_uring_poll
ci2-upstream-kcsan-gce 2022/06/23 08:08 upstream de5c208d533a 912f5df7 .config log report info KCSAN: data-race in __io_fill_cqe_req / io_uring_poll
ci2-upstream-kcsan-gce 2022/06/22 19:19 upstream 3abc3ae553c7 912f5df7 .config log report info KCSAN: data-race in __io_fill_cqe_req / io_uring_poll
ci2-upstream-kcsan-gce 2022/06/20 17:32 upstream 78ca55889a54 b9406563 .config log report info KCSAN: data-race in __io_fill_cqe_req / io_uring_poll
ci2-upstream-kcsan-gce 2022/06/20 12:43 upstream a111daf0c53a b9406563 .config log report info KCSAN: data-race in __io_fill_cqe_req / io_uring_poll
ci2-upstream-kcsan-gce 2022/06/18 09:56 upstream 4b35035bcf80 8f633d84 .config log report info KCSAN: data-race in __io_fill_cqe_req / io_uring_poll
ci2-upstream-kcsan-gce 2022/06/17 15:56 upstream 47700948a4ab cb58b3b2 .config log report info KCSAN: data-race in __io_fill_cqe_req / io_uring_poll
ci2-upstream-kcsan-gce 2022/06/16 00:31 upstream 30306f6194ca 1719ee24 .config log report info KCSAN: data-race in __io_fill_cqe_req / io_uring_poll
ci2-upstream-kcsan-gce 2022/06/14 14:17 upstream b13baccc3850 127d1faf .config log report info KCSAN: data-race in __io_fill_cqe_req / io_uring_poll
ci2-upstream-kcsan-gce 2022/06/06 04:41 upstream f2906aa86338 c8857892 .config log report info KCSAN: data-race in __io_fill_cqe_req / io_uring_poll
ci2-upstream-kcsan-gce 2022/05/23 23:18 upstream 140e40e39a29 e7f9308d .config log report info KCSAN: data-race in __io_fill_cqe_req / io_uring_poll
ci2-upstream-kcsan-gce 2022/05/18 10:01 upstream 210e04ff7681 744a39e2 .config log report info KCSAN: data-race in __io_fill_cqe_req / io_uring_poll
ci2-upstream-kcsan-gce 2022/05/07 06:48 upstream 4b97bac0756a e60b1103 .config log report info KCSAN: data-race in __io_fill_cqe_req / io_uring_poll
ci2-upstream-kcsan-gce 2022/05/03 07:06 upstream 9050ba3a61a4 2df221f6 .config log report info KCSAN: data-race in __io_fill_cqe_req / io_uring_poll
ci2-upstream-kcsan-gce 2022/05/01 23:13 upstream b2da7df52e16 2df221f6 .config log report info KCSAN: data-race in __io_fill_cqe_req / io_uring_poll
ci2-upstream-kcsan-gce 2022/04/22 21:07 upstream d569e86915b7 131df97d .config log report info KCSAN: data-race in __io_fill_cqe_req / io_uring_poll
ci2-upstream-kcsan-gce 2022/04/15 06:21 upstream b9b4c79e5830 b17b2923 .config log report info KCSAN: data-race in __io_fill_cqe_req / io_uring_poll
ci2-upstream-kcsan-gce 2022/04/13 11:27 upstream a19944809fe9 b17b2923 .config log report info KCSAN: data-race in __io_fill_cqe_req / io_uring_poll
ci2-upstream-kcsan-gce 2022/04/11 16:21 upstream ce522ba9ef7e af01ee7d .config log report info KCSAN: data-race in __io_fill_cqe_req / io_uring_poll
ci2-upstream-kcsan-gce 2022/04/10 00:02 upstream e1f700ebd6be e22c3da3 .config log report info KCSAN: data-race in __io_fill_cqe_req / io_uring_poll
ci2-upstream-kcsan-gce 2022/04/09 10:58 upstream f1b45d8ccb98 e22c3da3 .config log report info KCSAN: data-race in __io_fill_cqe_req / io_uring_poll
ci2-upstream-kcsan-gce 2022/04/08 20:12 upstream 1831fed55973 e22c3da3 .config log report info KCSAN: data-race in __io_fill_cqe_req / io_uring_poll
ci2-upstream-kcsan-gce 2022/04/07 05:52 upstream 3e732ebf7316 53c67432 .config log report info KCSAN: data-race in __io_fill_cqe_req / io_uring_poll
ci2-upstream-kcsan-gce 2022/04/06 09:40 upstream 3e732ebf7316 86b4b7f8 .config log report info KCSAN: data-race in __io_fill_cqe_req / io_uring_poll
ci2-upstream-kcsan-gce 2022/04/05 17:33 upstream ce4c854ee868 0127c10f .config log report info KCSAN: data-race in __io_fill_cqe_req / io_uring_poll
ci2-upstream-kcsan-gce 2022/04/03 01:54 upstream be2d3ecedd99 79a2a8fc .config log report info KCSAN: data-race in __io_fill_cqe_req / io_uring_poll
ci2-upstream-kcsan-gce 2022/04/01 18:17 upstream d0d642a5d365 79a2a8fc .config log report info KCSAN: data-race in __io_fill_cqe_req / io_uring_poll
ci2-upstream-kcsan-gce 2022/04/01 04:33 upstream e8b767f5e040 68fc921a .config log report info KCSAN: data-race in __io_fill_cqe_req / io_uring_poll
ci2-upstream-kcsan-gce 2022/03/31 10:11 upstream 74164d284b29 9d49f3a7 .config log report info KCSAN: data-race in __io_fill_cqe_req / io_uring_poll
ci2-upstream-kcsan-gce 2022/03/28 19:59 upstream ae085d7f9365 6bdac766 .config log report info KCSAN: data-race in __io_fill_cqe_req / io_uring_poll
ci2-upstream-kcsan-gce 2022/03/27 08:29 upstream bddac7c1e02b 89bc8608 .config log report info KCSAN: data-race in __io_fill_cqe_req / io_uring_poll
ci2-upstream-kcsan-gce 2022/03/26 03:02 upstream 52d543b5497c 89bc8608 .config log report info KCSAN: data-race in __io_fill_cqe_req / io_uring_poll
ci2-upstream-kcsan-gce 2022/03/25 01:05 upstream 52deda9551a0 89bc8608 .config log report info KCSAN: data-race in __io_fill_cqe_req / io_uring_poll
ci2-upstream-kcsan-gce 2022/03/24 11:02 upstream ed4643521e6a 89bc8608 .config log report info KCSAN: data-race in __io_fill_cqe_req / io_uring_poll
ci2-upstream-kcsan-gce 2022/03/23 23:48 upstream 6b1f86f8e9c7 5ff41e94 .config log report info KCSAN: data-race in __io_fill_cqe_req / io_uring_poll
ci2-upstream-kcsan-gce 2022/03/23 05:07 upstream 3bf03b9a0839 5ff41e94 .config log report info KCSAN: data-race in __io_fill_cqe_req / io_uring_poll
ci2-upstream-kcsan-gce 2022/03/22 14:15 upstream b47d5a4f6b8d d88ef0c5 .config log report info KCSAN: data-race in __io_fill_cqe_req / io_uring_poll
* Struck through repros no longer work on HEAD.